CVE-2025-37124
Unauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge Interface
Vexday Risk Score
21Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 8.6EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
16 set 2025Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitation could allow an attacker to route potentially harmful traffic through the internal network, leading to unauthorized access or disruption of services.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Quer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →